unionpay-apis
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate instructional content for integrating China UnionPay payment services, including Gateway, Token, and QR code payments.
- [SAFE]: All external URLs point to official and verified China UnionPay domains (unionpay.com, 95516.com). No suspicious or third-party domains were detected.
- [SAFE]: The provided code snippets demonstrate secure implementation patterns, specifically emphasizing the importance of signature validation (AcpService.validate) to prevent notification spoofing attacks.
- [SAFE]: The hardcoded merchant ID (777290058110048) and certificate password (000000) are well-known defaults for the UnionPay test environment and do not constitute a credential leak.
- [SAFE]: Data handling for sensitive information like card numbers (accNo) uses the SDK's built-in encryption methods (AcpService.encryptData).
Audit Metadata